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REMARKS 

Claims 1-29 are pending in the above-identified application. The Examiner has rejected 
claims 1-29. 

Claim Rejections Under 35 U.S.C. § 103(a) 

The Examiner has rejected claims 1-29 under 35 U.S.C. § 103. Applicants traverse that 
rejection. 

Claims 1-6, 10-21, and 25-29 

Claims 1-6, 10-21 and 25-29 are rejected under 35 U.S.C. § 103(a) as being unpatentable 
over U.S. Patent No. 7,076,557 to LaMacchia et al. ("LaMacchia") in view of U.S. Patent No. 
7,089,242 to Chan et al. ("Chan"). 

The Examiner states that "LaMacchia is silent on privilege information including a 
privilege value based on at least in part on the untrusted class." Therefore, the Examiner agrees 
that LaMacchia does not teach "the privilege information including a privilege value based, at 
least in part, on the untrusted class," as is recited in each of claims 1, 18, and 25. 

However, the Examiner opines that Chan teaches that the privilege information includes a 
privilege value based at least in part on an untrusted class. However, that is not correct. 

Chan teaches that a class has access to a sensitive function in a protected class only if that 

class is listed as a friend object of the protected class. As stated in Chan, 

The protected class 4 includes two sensitive functions 6 and 8 that 
each include a check friend call 18 and 20 to friend objects 10 and 
12, respectively. Packages 26 and 28 are in separate JAVA 
packages from the protected class 6. Package 26 includes class 30 
that includes a call 32 to sensitive function 6. Similarly, package 
28 includes class 34 that includes a call 36 to sensitive function 8. 
The calls 32 and 36 to the sensitive functions 6 and 8 may be 
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within functions within the classes 30 and 36, respectively. The 
friend objects 10 and 12 may list different packages, classes and/or 
functions as friends. In this way, the friend objects 10 and 12 may 
allow different sets of external functions to access sensitive 
functions 18 and 20. For instance, the class 30 or function 
including the call 32 to function 6 may be listed as a friend in 
friend object 10, but not friend object 12, whereas the class 34 or 
function including the call 36 to function 8 may be listed as a 
friend in friend object 12, but not friend object 10. In JAVA 
implementations, the preferred embodiment Friend class allows the 
programmer to restrict external function access to sensitive 
functions. 

(Chan, col. 5, lines 4-26). Therefore, as taught in Chan, the package has access to the sensitive 

function only if the package is listed as a friend. However, the "sensitive function" taught by 

Chan is not a "trusted class," or "untrusted class" as is recited in claims 1,18, and 25. Instead, 

Chan is directed to protection of a sensitive function that resides within a class from access by 

members outside of that class. There is no discussion as to whether the class itself is trusted or 

not. As described, "[a] class is a blueprint or prototype that defines the variables and functions 

(methods) common to all objects of a certain kind." (Chan, col. 1, lines 17-19). A group of 

classes can be formed into a package. (Chan, col. 1, lines 20-25). Chan teaches a way of 

allowing access to sensitive functions within a class by members that are not in the class. 

i 

Chan, therefore, does not teach a privilege value which is based on the untrusted class, as 
the Examiner contends, because Chan does not teach whether the class that includes the sensitive 
function is a trusted or untrusted class. Therefore, Chan also does not teach "the privilege 
information including a privilege value based, at least in part, on the untrusted class," as is 
recited in claims 1,18, and 25. 

Claims 1,18, and 25 are therefore allowable over the combination of LaMacchie and 
Chan. Claims 2-6 and 10-17 depend from claim 1 and are therefore allowable over the 
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combination of LaMacchie and Chan for at least the same reasons as is claim 1. Claims 19-21 
depend from claim 18 and are allowable over the combination of LaMacchie and Chan for at 
least the same reasons as is claim 18. Claims 26-29 are allowable over the combination of 
LaMacchie and Chan for at least the same reasons as is claim 25. 

Claims 7-9 and 22-24 

Claims 7-9 and 22-24 are rejected under 35 U.S.C. § 103(a) as being unpatentable over 
LaMacchia in view of Chan and in further view of reference titled "Extending Java for Package 
Based Access Control," IEEE 2000, pages 67-76 to Papa et al. ("Papa"). 

As discussed above, claims 1 and 18 are allowable over the combination of LaMacchia 
and Chan because neither of them teach "the privilege information including a privilege value 
based, at least in part, on the untrusted class." As discussed in the Amendment filed on May 7, 
2007, Papa also does not teach this element. Therefore, claims 7-9, which depend from claim 1, 
and claims 22-24, which depend from claim 18, are allowable over the combination of 
LaMacchie, Chan, and Papa for at least the same reasons as is claims 1 and 18, respectively. 

Conclusion 

Applicant respectfully requests that the Examiner consider these remarks and allow 
claims 1-29, which are in condition for allowance. 

Furthermore, Applicant respectfully points out that the final action by the Examiner 
presented some new arguments as to the application of the art against Applicant's invention. It is 
respectfully submitted that the entering of the Amendment would allow the Applicant to reply to 
the final rejections and place the application in condition for allowance. 
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Finally, Applicant submits that the entry of the amendment would place the application in 
better form for appeal, should the Examiner dispute the patentability of the pending claims. 

In view of the foregoing remarks, Applicant submits that this claimed invention, as 
amended, is neither anticipated nor rendered obvious in view of the prior art references cited 
against this application. Applicant therefore requests the entry of this Amendment, the 
Examiner's reconsideration and reexamination of the application, and the timely allowance of the 
pending claims. 

Please grant any extensions of time required to enter this response and charge any 
additional required fees to Deposit Account 06-0916. 



Respectfully submitted, 



FINNEGAN, HENDERSON, FARABOW, 
GARRETT & DUNNER, L.L.P. 
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